TRANSPARENT & PROTOCOL-SAFE PRICING

The Pre-TAC standard for FortiGate engineers & teams.

Priced attractively for individual engineers out-of-pocket, with bulletproof client-side execution that complies with strict enterprise security protocols and NDAs.

100% Career-Safe Protocol Shield: Runs in local browser memory (WASM) · Zero data egress · Works completely offline.
Basic
Unlimited local config & log scrubbing + 3 instant quick-fix hygiene alerts for individual sysadmins.
€9
per month · billed monthly
Flat monthly rate · Cancel anytime
  • ✓ Unlimited config & log scrubber (WASM)
  • ✓ Zero data egress guarantee (works offline)
  • ✓ Save to Account (Opt-In): 2 Standalone Devices or up to 3 Devices in HA
  • ✓ 3 Instant Quick-Fix hygiene alerts
  • ✓ Generic TAC baseline .ttl macro
  • ✓ 40 Diagnostic Script Arsenal (.ttl, .sh, .py, CLI)
  • ✕ Tailored FortiOS-locked .ttl compiler
  • ✕ Multi-VDOM automated looping
  • ✕ Pre-TAC Readiness Score & Dossier
★ CYBERSECURITY
Specialists / Experts
For Technical Support Engineers & NOC Technicians wanting to progress and close tickets 3x faster.
Request a Quote
Members Only · Custom Invoicing
Sign in as member to view rates
  • ✓ Unlimited tailored .ttl macro compilation
  • ★ Save to Account: Up to 30 Devices (Fixed Period)
  • ★ Version-locked FortiOS syntax (6.4–7.4)
  • ★ Multi-VDOM automated loop iterations
  • ★ Pre-TAC Readiness Score (0–100%)
  • ★ One-click copy FortiCare ticket description
  • ✓ Conserve Mode & WAD leak diagnostics
  • ✓ 100% Career-Safe: Zero corporate protocol risk
CCIEs / NSE 1–8
Field Consultant
For on-site consultants, CCIEs/NSE8s and change-window lead architects.
Request a Quote
Members Only · Enterprise Scope
Sign in as member to view rates
  • ✓ Everything in Specialist, plus:
  • ✓ Save to Account: Least Restrictions (Fleet scale, extended retention)
  • ✓ Pre/Post change-window delta validation
  • ✓ HA pair deep checksum diffing (A/B/C/Hybrid)
  • ✓ Multi-snapshot historical config drift engine
  • ✓ On-site SFP optical transceiver decay audit
  • ✓ Full PSIRT CVE & bug advisory correlation
  • ✓ Executive Client Handover RCA PDF exports
Contact Sales
MSP Fleet Hub
For managed service providers and SOC teams managing 50+ customer firewalls.
Request a Quote
Members Only · Fleet Deployment
Sign in as member to view rates
  • ✓ 5 Included team seats with RBAC controls
  • ✓ Save to Account: Unrestricted Fleet & Multi-Tenant Folders
  • ✓ Multi-tenant client workspace folders
  • ✓ White-labeled client post-mortem reports (PDF)
  • ✓ REST API token access for automated triage
  • ✓ ServiceNow & Jira webhook ticketing sync
  • ✓ Fleet-wide patch compliance radar
  • ✓ Dedicated Slack / Teams escalation channel
72-HOUR INCIDENT PASS · TEMPORARILY RESTRICTED

Emergency Incident Pass (72-Hour Triage) Restricted to Specialist Members & Above

Single-incident 72-hour emergency triage passes are restricted to Specialist members and above. Community level members are not eligible to purchase or activate emergency incident passes at this time. Direct standalone incident checkout will return at a later date.

Not available on Basic / Community tier
FEATURE BY FEATURE BREAKDOWN

Comprehensive Tier-to-Tier Matrix

Compare capabilities across Basic (€9/mo), Desk Specialist, Field Consultant, MSP Fleet and Air-Gapped Enterprise.

Feature / Capability Basic
€9 / mo
Specialists / Experts
Request a Quote
Field Consultant
Request a Quote
MSP Fleet
Request a Quote
Air-Gapped Enterprise
Custom
1. Privacy, Execution & Career-Safe Compliance
100% Client-Side In-Browser Execution (WASM) ✓ ✓ ✓ ✓ ✓
Zero Data Egress Guarantee (Works Offline / Disconnected) ✓ ✓ ✓ ✓ ✓
IPsec PSKs, Passwords & Cert Redaction ✓ ✓ ✓ ✓ ✓
Complies with Strict Enterprise NDA & GDPR Handover ✓ ✓ ✓ ✓ ✓
Private On-Prem Air-Gapped Docker Appliance ✕ ✕ ✕ ✕ Included
Save to Account (Opt-In Vaulting) 2 Standalone / HA Pair Up to 30 Devices Least Restrictions Least Restrictions On-Prem Local
Device Scope (Standalone vs. HA Cluster) 2 Standalone Devices or up to 3 Devices in HA Up to 30 Firewalls Fleet-Scale 50+ to 500+ Fleet Unlimited On-Prem
Vault Retention Policy & History Window Active Snapshot Fixed Period (30–90 Days) Extended / Multi-Year Multi-Year / Indefinite Permanent Local
Visitor Level Egress Protection Visitor level is strictly 100% In-Browser RAM (Save to Account disabled; Zero Data Egress).
2. Pre-TAC Compilation & CLI Automation
Generic Baseline TAC Tera Term (.ttl) Script ✓ ✓ ✓ ✓ ✓
FortiOS Version-Locked Syntax Compiler (6.4, 7.0, 7.2, 7.4) ✕ Unlimited Unlimited Unlimited Unlimited
Multi-VDOM Automated Loop Iterations ✕ ✓ ✓ ✓ ✓
Pre-TAC Readiness Score & Ticket Description Generator ✕ ✓ ✓ ✓ ✓
Conserve Mode WAD Memory & Softirq Diagnostic Payloads ✕ ✓ ✓ ✓ ✓
3. Field Change-Windows & Longitudinal Drift Forensics
Basic Single-Snapshot Syntax Preflight ✓ ✓ ✓ ✓ ✓
HA Pair Deep Checksum De-sync Analysis (A/B/C/Hybrid) ✕ ✕ ✓ ✓ ✓
Pre vs. Post Change-Window Delta Verification ✕ ✕ ✓ ✓ ✓
Longitudinal Conserve Mode Growth Trajectory Curve ✕ ✕ ✓ ✓ ✓
SFP Optical Transceiver (dBm) Light Decay Audit ✕ ✕ ✓ ✓ ✓
PSIRT CVE & Bug Advisory Correlation Radar ✕ ✕ ✓ ✓ ✓
4. Team Collaboration, Multi-Tenancy & Integrations
Included User Seats 1 User 1 User 1 User 5 Seats Custom Seats
TAC-Ready Pre-Flight Dossier Export (PDF/ZIP) ✕ ✓ ✓ ✓ ✓
White-Labeled Client Post-Mortem Reports ✕ ✕ ✕ ✓ ✓
Multi-Tenant Client Folders & Workspace Isolation ✕ ✕ ✕ ✓ ✓
REST API Token Access for Automated CI/CD Triage ✕ ✕ ✕ ✓ ✓
SAML 2.0 / SSO & Active Directory Integration ✕ ✕ ✕ ✕ ✓
SECTOR DEPLOYMENT ARCHITECTURE

Tier & Procurement Guidance by Sector

From local school districts and clinical medical practices to statewide government backbones and air-gapped utility grids (Power, Water, Gas) — discover which Ferritaas tier and architecture fits your compliance requirements.

Specialist · Fleet

01 · Schools & Universities

K-12 school districts to Tier-1 university campuses. Strict student privacy architecture complying with CIPA, FERPA, and Eduroam without cloud telemetry leakage.

1 HA Pair to 200+ VDOMs CIPA · FERPA 20% Academic PO
Read sector white paper
Specialist · Enterprise

02 · Hospitals & Clinics

Private medical practices to multi-hospital systems. Zero-egress architecture guarantees ePHI never touches external clouds, fulfilling HIPAA, HITECH, and FDA IoMT.

FG-40F to FG-3000F Core HIPAA · HITECH 100% In-RAM
Read sector white paper
Field Pro · Enterprise

03 · State & Municipalities

City halls, county administration, and 911 dispatch centers. 30-day bounded cryptographic offline leases guarantee uninterrupted operations through severed WAN lines.

Mobile 911 & Branch PSAP FBI CJIS 5.9 30-Day Lease
Read sector white paper
Sovereign Appliance

04 · Power, Water & Gas

Electric substations, water treatment facilities, and gas pipelines. 100% sovereign air-gap strictly satisfies NERC-CIP zero-cloud rules and Purdue Level 1–3 SCADA.

FortiGate Rugged (FGR) NERC-CIP-005 · NIS2 Zero Cloud Docker
Read sector white paper